Test Kennung:	1.3.6.1.4.1.25623.1.0.106407
Kategorie:	Denial of Service
Titel:	NTP.org 'ntpd' 4.2.7p22 - 4.2.8p8, 4.3.0 - 4.3.93 DoS Vulnerability (Nov 2016)
Zusammenfassung:	NTP.org's reference implementation of NTP server, ntpd, is prone to a; denial of service vulnerability.
Beschreibung:	Summary: NTP.org's reference implementation of NTP server, ntpd, is prone to a denial of service vulnerability. Vulnerability Insight: If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet. Vulnerability Impact: A remote attacker may be able to perform a denial of service on ntpd. Affected Software/OS: NTPd version 4.2.7p22 up to 4.2.8p8, 4.3.0 up to 4.3.93. Solution: Update to version 4.2.8p9, 4.3.94 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7434 BugTraq ID: 94448 http://www.securityfocus.com/bid/94448 CERT/CC vulnerability note: VU#633847 https://www.kb.cert.org/vuls/id/633847 https://www.exploit-db.com/exploits/40806/ FreeBSD Security Advisory: FreeBSD-SA-16:39 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc http://www.securitytracker.com/id/1037354
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.